lambda wip

Author: sorah

Dockerfile

@@ -27,7 +27,13 @@ WORKDIR /app
 COPY Gemfile /app/
 COPY Gemfile.lock /app/
 
-RUN bundle install --path /gems --jobs 100 --deployment --without development:test
+RUN bundle config set deployment true \
+ && bundle config set without development:test \
+ && bundle config set path /gems \
+ && true
+ENV BUNDLE_JOBS=100
+RUN bundle install
+RUN bundle binstubs aws_lambda_ric --force --path /usr/local/bin
 
 ###
 
@@ -41,6 +47,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked --mount=type=cache,t
 WORKDIR /app
 COPY --from=builder /gems /gems
 COPY --from=builder /app/.bundle /app/.bundle
+COPY --from=builder /usr/local/bin/aws_lambda_ric /usr/local/bin/aws_lambda_ric
 COPY --from=nodebuilder /app/public/vite /app/public/vite
 COPY . /app/
 

Gemfile

@@ -12,6 +12,7 @@ gem 'commonmarker'
 gem 'aws-sdk-core' # STS
 gem 'aws-sdk-s3'
 gem 'aws-sdk-sqs'
+gem 'aws-sdk-ssm'
 gem 'omniauth'
 gem 'omniauth-github'
 gem 'octokit'
@@ -24,7 +25,8 @@ gem 'nokogiri', require: false
 gem 'rexml', require: false # letter-opener
 gem 'jsonnet', require: false
 
-gem 'shoryuken'
+gem 'shoryuken', require: false
+gem 'lambdakiq', require: false
 
 gem 'jbuilder', '~> 2.9'
 gem 'haml'
@@ -37,10 +39,11 @@ gem "sentry-ruby"
 gem "sentry-rails"
 gem 'rails_semantic_logger'
 
-gem 'puma'
+gem 'puma', require: false
+gem 'aws_lambda_ric', require: false
+gem 'apigatewayv2_rack'
 
 group :production do
-  gem 'barnes'
 end
 
 group :development, :test do

Gemfile.lock

@@ -77,6 +77,10 @@ GEM
       uri (>= 0.13.1)
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
+    apigatewayv2_rack (0.4.0)
+      base64
+      rack
+      stringio
     aws-eventstream (1.4.0)
     aws-partitions (1.1182.0)
     aws-sdk-core (3.237.0)
@@ -97,11 +101,12 @@ GEM
     aws-sdk-sqs (1.106.0)
       aws-sdk-core (~> 3, >= 3.234.0)
       aws-sigv4 (~> 1.5)
+    aws-sdk-ssm (1.206.0)
+      aws-sdk-core (~> 3, >= 3.234.0)
+      aws-sigv4 (~> 1.5)
     aws-sigv4 (1.12.1)
       aws-eventstream (~> 1, >= 1.0.2)
-    barnes (0.0.9)
-      multi_json (~> 1)
-      statsd-ruby (~> 1.1)
+    aws_lambda_ric (3.1.3)
     base64 (0.3.0)
     bigdecimal (3.3.1)
     builder (3.3.0)
@@ -178,6 +183,11 @@ GEM
       mini_portile2 (>= 2.2.0)
     jwt (3.1.2)
       base64
+    lambdakiq (2.3.0)
+      activejob
+      aws-sdk-sqs
+      concurrent-ruby
+      railties
     launchy (3.1.1)
       addressable (~> 2.8)
       childprocess (~> 5.0)
@@ -206,7 +216,6 @@ GEM
     mini_mime (1.1.5)
     mini_portile2 (2.8.9)
     minitest (5.26.1)
-    multi_json (1.17.0)
     multi_xml (0.7.2)
       bigdecimal (~> 3.1)
     multipart-post (2.4.1)
@@ -372,7 +381,6 @@ GEM
     snaky_hash (2.0.3)
       hashie (>= 0.1.0, < 6)
       version_gem (>= 1.1.8, < 3)
-    statsd-ruby (1.5.0)
     stringio (3.1.8)
     temple (0.10.4)
     thor (1.4.0)
@@ -404,10 +412,12 @@ PLATFORMS
 
 DEPENDENCIES
   addressable
+  apigatewayv2_rack
   aws-sdk-core
   aws-sdk-s3
   aws-sdk-sqs
-  barnes
+  aws-sdk-ssm
+  aws_lambda_ric
   commonmarker
   connection_pool
   factory_bot_rails
@@ -419,6 +429,7 @@ DEPENDENCIES
   jbuilder (~> 2.9)
   jsonnet
   jwt
+  lambdakiq
   letter_opener_web
   listen
   nokogiri

config.ru

@@ -1,6 +1,9 @@
-# This file is used by Rack-based servers to start the application.
-
 require_relative "config/environment"
 
+if ENV['AWS_LAMBDA_FUNCTION_NAME']
+  use Apigatewayv2Rack::Middlewares::CloudfrontVerify, ENV['CLOUDFRONT_VERIFY'] if ENV['CLOUDFRONT_VERIFY']
+  use Apigatewayv2Rack::Middlewares::CloudfrontXff
+end
+
 run Rails.application
 Rails.application.load_server

config/boot.rb

@@ -1,3 +1,5 @@
 ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
 
 require "bundler/setup" # Set up gems listed in the Gemfile.
+
+require_relative 'lambda_boot' if ENV['AWS_LAMBDA_FUNCTION_NAME']

config/environments/development.rb

@@ -30,11 +30,8 @@
   # Change to :null_store to avoid any caching.
   config.cache_store = :memory_store
 
+  # see also config/initializers/active_job.rb
   config.active_job.queue_adapter = :inline
-  if ENV['ENABLE_SIDEKIQ']
-    config.active_job.queue_name_prefix = "sponsor_app"
-    config.active_job.queue_adapter = :sidekiq
-  end
 
   if ENV['MAILGUN_SMTP_PASSWORD']
     config.action_mailer.smtp_settings = {

config/environments/production.rb

@@ -75,9 +75,8 @@
     secure: true,
   )
 
-  # Use a real queuing backend for Active Job (and separate queues per environment)
-  config.active_job.queue_adapter = ENV.fetch('ENABLE_SHORYUKEN', '1') == '1' ? :shoryuken : :inline
-  # config.active_job.queue_name_prefix = "sponsor_app2_production"
+  # see also config/initializers/active_job.rb
+  config.active_job.queue_adapter = :inline
 
   # Disable caching for Action Mailer templates even if Action Controller
   # caching is enabled.

config/initializers/active_job.rb

@@ -0,0 +1,9 @@
+Rails.application.configure do
+  ENV['JOB_ADAPTER'] ||= 'shoryuken' if ENV['ENABLE_SHORYUKEN']
+  case ENV['JOB_ADAPTER']
+  when 'shoryuken'
+    config.active_job.queue_adapter = :shoryuken
+  when 'lambdakiq'
+    config.active_job.queue_adapter = :lambdakiq
+  end
+end

config/initializers/lambdakiq.rb

@@ -0,0 +1,3 @@
+ActiveJob::Base.include Lambdakiq::Worker
+ActionMailer::MailDeliveryJob.include Lambdakiq::Worker
+ActionMailer::MailDeliveryJob.queue_as ENV['LAMBDAKIQ_QUEUE'] if ENV['LAMBDAKIQ_QUEUE']

config/lambda_boot.rb

@@ -0,0 +1,15 @@
+ssm = Aws::SSM::Client.new
+r = /^SSM_SECRET__/
+params = ENV.keys.grep(r).map do |k, v|
+  [v, k.sub(r, '')]
+end.to_h
+params.keys.each_slice(10) do |page|
+  ssm.get_parameters(
+    names: page.keys,
+    with_decryption: true,
+  ).parameters.each do |param|
+    ENV[page.fetch(param.name)] = param.value
+  end
+end
+
+